d8ab325842cbd08ed998bc986e2944aa04f57c5f5d5741c0e77dd9b30c2cf8ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8ab325842cbd08ed998bc986e2944aa04f57c5f5d5741c0e77dd9b30c2cf8ec
Size

320KB
MD5

a33d3be78e4a0ade83e46e7738c33c30
SHA1

c5c42f7d4dc55515e5ab342fe2ebd8de21564e2f
SHA256

d8ab325842cbd08ed998bc986e2944aa04f57c5f5d5741c0e77dd9b30c2cf8ec
SHA512

6cfabcb16daf77cc3942ad32b0491daf277eefe0a7705cb3c45e70dc17dd26df5f8f9aa10208d79074743c9b05b12ede2dc13b69ed1a44ed105f3df658397a91
SSDEEP

6144:RhDh9xH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Rhr52EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

d8ab325842cbd08ed998bc986e2944aa04f57c5f5d5741c0e77dd9b30c2cf8ec
.exe windows x86

4468585bfb88de4efacff834696f0055

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExW
GetFileAttributesExW
GetNumaProcessorMap
GetNumberOfConsoleInputEvents
AddLocalAlternateComputerNameA
ReleaseMutex
GetVolumePathNameW
GetCommModemStatus
_lclose
DeleteAtom

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE